Job Description The bet we're asking you to make Every compliance framework ever written — GDPR, HIPAA, CMMC 2.0, NIS2, DORA, the EU AI Act, FIPS 140-3, SOC 2 — regulates data access, not who performs it. That sentence is the entire reason this role exists. In 2026, the entity accessing your custome